AW: htaccess rewrite rule to https let my apps stop working

[Tiemo Hollmann TB via use-livecode]

I used the rewrite conditions to https from Matthias in the root of my
domain and build a new LC 8.1.5 standalone including the revsecurity.dll.
like Tom pointed out, but I still get an error.
The return value of my php is surprisingly some garbage html code instead of
my php return value and "the result" of my put URL statement is: " tsneterr:
HTTP response code 401 returned from server".
The only "special" thing I can see on my domain is, that I have another
htaccess in the directory of my PHPs, with a password protection for this
sub-dir, which works since years fine without this rewrite condition. The
"401" error (authentication failed) points to this password protection in
the sub-htaccess.
But I don't see the relation of the rewrite condition in the root htaccess
to this password authentication in the php directory. There is the end of my
server knowledge.
Can anybody shed some light on this?
Thanks
Tiemo


-Ursprüngliche Nachricht-
Von: use-livecode [mailto:use-livecode-boun...@lists.runrev.com] Im Auftrag
von tbodine via use-livecode
Gesendet: Freitag, 18. August 2017 16:47
An: use-revolut...@lists.runrev.com
Cc: tbodine <bod...@bodinetraininggames.com>
Betreff: Re: AW: htaccess rewrite rule to https let my apps stop working

T.

Had a similar experience while migrating my site to https. What I found was
my standalones were missing the revsecurity.dll external. After rebuilding
those to include revsecurity.dll, the standalones were able to contact my
site and access stacks and other files there without changing my links from
http to https, since the htaccess was managing that.

Notes: On Windows, that must be at the same level as the standalone exe
itself rather than the externals folder. And codesign your externals as well
as standalones.

HTH,
Tom B.

 





--
View this message in context:
http://runtime-revolution.278305.n4.nabble.com/htaccess-rewrite-rule-to-http
s-let-my-apps-stop-working-tp4718561p4718572.html
Sent from the Revolution - User mailing list archive at Nabble.com.

___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode


___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Re: AW: htaccess rewrite rule to https let my apps stop working

[tbodine via use-livecode]

T.

Had a similar experience while migrating my site to https. What I found was
my standalones were missing the revsecurity.dll external. After rebuilding
those to include revsecurity.dll, the standalones were able to contact my
site and access stacks and other files there without changing my links from
http to https, since the htaccess was managing that.

Notes: On Windows, that must be at the same level as the standalone exe
itself rather than the externals folder. And codesign your externals as well
as standalones.

HTH,
Tom B.

 





--
View this message in context: 
http://runtime-revolution.278305.n4.nabble.com/htaccess-rewrite-rule-to-https-let-my-apps-stop-working-tp4718561p4718572.html
Sent from the Revolution - User mailing list archive at Nabble.com.

___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

AW: htaccess rewrite rule to https let my apps stop working

[Tiemo Hollmann TB via use-livecode]

Hi Matthias,
Thanks for your example, I'll give it a try
using these Rewrite rules, you could stay with plain http:// URLs in your LC 
code? And LC doesn't notice the difference and everything works as before? Do 
you call PHPs on your server? Could there be a difference between html and php 
calls with return values?
Tiemo


-Ursprüngliche Nachricht-
Von: use-livecode [mailto:use-livecode-boun...@lists.runrev.com] Im Auftrag von 
Matthias Rebbe via use-livecode
Gesendet: Freitag, 18. August 2017 14:42
An: How to use LiveCode 
Cc: Matthias Rebbe 
Betreff: Re: htaccess rewrite rule to https let my apps stop working

Hi Tiemo,

it´s messed up.
Please use the link
https://dl.qck.nu//?dl=sample_htaccess.txt 

to download the textfile.

I´ve forgot to mention that you have to replace yourdomain.com 
 with your domain.

Matthias
> Am 18.08.2017 um 14:25 schrieb Matthias Rebbe via use-livecode 
> >:
> 
> Hi Tiemo,
> 
> we are using the following code in the htaccess to redirect  http:// 
> request (either with or without www) to https://www.multitronic.de 
>   >
> 
> RewriteEngine on
> RewriteCond %{HTTPS} off
> RewriteCond %{HTTP_HOST} ^yourdomain.com  
> >$ [NC,OR] RewriteCond 
> %{HTTP_HOST} ^www.yourdomain.com  
> >$ [NC] 
> RewriteRule (.*) https://www.yourdomain.com/$1 
>   > [R=301,L] RewriteCond %{HTTP_HOST} 
> ^yourdomain.com   >$ [NC] RewriteRule (.*) 
> https://www.yourdomain.com/$1  
> > 
> [R=301,L]
> 
> 
> if the sample code is mixed up then you´ll find it also here as text 
> file for download
> 
> https://dl.qck.nu//?dl=sample_htaccess.txt 
>  
>  >
> 
> 
> HTH
> Matthias
> 

___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode


___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

AW: htaccess rewrite rule to https let my apps stop working

[Tiemo Hollmann TB via use-livecode]

Hi Mark,

I think the oldest version was build with LC 6.7. As far as I can see that
version supports https.
Is there any characteristic on the standalone, to identify the engine
version used?
I will give a redirect a try. Thanks for your ideas

Tiemo

-Ursprüngliche Nachricht-
Von: use-livecode [mailto:use-livecode-boun...@lists.runrev.com] Im Auftrag
von Mark Waddingham via use-livecode
Gesendet: Freitag, 18. August 2017 14:15
An: How to use LiveCode 
Cc: Mark Waddingham 
Betreff: Re: htaccess rewrite rule to https let my apps stop working

On 2017-08-18 13:58, Tiemo Hollmann TB via use-livecode wrote:
> Hello,
> 
> I attached a certificate to our domain and started switching our 
> domain / web from http to https, because of the security alerts of 
> some browsers saying that our site isn't safe. So far so good. Our web 
> hoster recommended to put a rewrite rule into the htaccess to redirect 
> all http calls on https.
> So far so good. That works fine with all URLs in a browser.

I wonder if using a URL redirect, rather than rewrite might work better:

https://www.digitalocean.com/community/tutorials/how-to-create-temporary-and
-permanent-redirects-with-apache-and-nginx

I might be wrong here but I think rewriting just changes the path which
apache uses to determine what to return; a redirect causes a 'Redirection'
return value to the client so the client can refetch at the (redirected)
URL.

> I can't just change all URLs in all my LC programs from http to https, 
> because my customers have lots of old version of my programs out 
> there, which are not anymore maintained, which were created with any 
> very old LC version I don't know anymore, etc.

Unless the distributed versions built with old versions of LiveCode were
built with HTTPS support built-in then they are very unlikely to work with
either a redirect or rewrite.

Even if you do a redirect/rewrite on the server, the client has to be able
to handle the protocol which the server produces correctly.

Warmest Regards,

Mark.

--
Mark Waddingham ~ m...@livecode.com ~ http://www.livecode.com/
LiveCode: Everyone can create apps

___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode


___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode